$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa File: 06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa (raw, json) Hash identifier: Yn3b6dA2SNRvJIxu+Ae1+4VMJH/OxKHC0YQMdr1Dli8= Subject key identifier: 91:87:8D:1E:AD:89:67:F6:0B:66:91:99:C9:F1:2B:20:B3:01:64:56 Certificate issuer: /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Certificate serial: 010D0C9F4328584BBA104A889FA7CF8E22EB2B00 Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 30158 IP address blocks: 199.189.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:4a:88:9f:a7:cf:8e:22:eb:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=a8c024e9-8bcd-4f9d-8a07-e9fad64d4164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:72:aa:63:54:fd:37:c4:3e:05:09:76:12:94: 18:6c:1e:f8:5b:fd:67:ee:f3:90:a4:06:6f:47:e4: 52:57:00:c2:80:fd:69:45:72:b9:35:f3:16:d8:c3: 9a:db:7a:de:7f:64:03:56:01:d0:15:b7:17:4e:9c: c6:33:eb:26:c3:9f:db:f8:e0:f4:ba:21:08:f3:93: 0d:0a:f8:90:ad:c2:5a:41:55:f0:38:1d:70:66:6c: af:fc:10:a8:e3:68:40:e6:29:2e:c4:17:6f:bc:dc: 76:f0:cb:22:f0:9f:30:d8:39:9b:17:cf:50:d8:2c: b6:c4:73:0c:e4:6f:13:23:c5:c1:16:9e:19:df:45: 15:1f:24:38:76:cb:a3:45:8d:91:f1:e8:e6:24:ef: 76:12:23:af:57:d9:3e:97:19:f2:e4:91:9e:d4:c6: f1:85:38:dc:ee:1c:9b:9b:50:f9:15:98:ed:9e:a8: 2e:92:cd:97:bf:86:67:76:9a:8a:7f:a1:a2:68:26: 1d:28:f0:e9:32:40:39:b9:76:df:e2:13:68:0a:5e: c9:6d:d0:21:46:18:6a:6f:9b:19:3e:d6:e9:50:f9: 9a:a2:f6:3f:7c:aa:aa:15:f7:0e:9e:27:64:93:05: b2:13:8d:58:92:f7:95:fc:cc:1f:72:8b:df:c0:c4: 32:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:87:8D:1E:AD:89:67:F6:0B:66:91:99:C9:F1:2B:20:B3:01:64:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl X509v3 Authority Key Identifier: keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer sbgp-ipAddrBlock: critical IPv4: 199.189.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c5:86:cc:f0:5b:67:48:76:dd:f6:47:89:26:2e:9b:00:34: 43:5a:87:f0:4f:70:64:68:2e:3b:a7:f7:a1:4e:31:19:35:03: 6f:a6:50:71:ca:31:78:e0:63:61:5c:3f:40:a6:71:76:94:82: 47:db:75:0e:67:5a:b7:3f:21:91:2d:bf:83:72:db:07:08:86: a7:7a:da:c9:29:ec:b3:ab:96:e3:fd:ec:4d:65:e7:5c:95:df: 6c:5c:ae:be:a1:4e:b2:c5:40:c3:0d:e0:eb:d0:99:b9:a9:73: 85:05:de:c8:92:c6:f1:cc:37:0e:6c:9a:e5:48:8d:68:a6:67: d3:23:ed:3b:89:d6:af:58:2b:b8:bd:c0:d2:ea:c1:3e:bc:a9: 5e:40:6c:e1:2e:e3:a5:af:f0:cc:1b:ad:8c:17:41:18:b1:b7: 51:9f:44:e1:53:d3:be:ca:5a:9e:71:e7:24:c4:85:b3:de:cb: 0d:60:02:16:51:9b:59:07:46:55:7f:f1:a1:3e:66:eb:5f:a8: 0c:90:d8:65:03:fc:73:74:21:48:02:ea:5a:a9:fa:9e:f2:35: 3a:48:c2:d6:b0:03:39:6a:44:6a:8b:16:5e:e0:71:51:34:29: a0:b1:95:37:bd:63:89:1c:d4:62:62:5b:a4:18:db:64:a6:94: 4d:2f:29:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EEqIn6fPjiLrKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhYWU3ZGItMmY1MS00NjU2LWJiYTAtNjRmMWQzZWUz MjU2MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk YThjMDI0ZTktOGJjZC00ZjlkLThhMDctZTlmYWQ2NGQ0MTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXKqY1T9N8Q+BQl2EpQYbB74W/1n7vOQpAZv R+RSVwDCgP1pRXK5NfMW2MOa23ref2QDVgHQFbcXTpzGM+smw5/b+OD0uiEI85MN CviQrcJaQVXwOB1wZmyv/BCo42hA5ikuxBdvvNx28Msi8J8w2DmbF89Q2Cy2xHMM 5G8TI8XBFp4Z30UVHyQ4dsujRY2R8ejmJO92EiOvV9k+lxny5JGe1MbxhTjc7hyb m1D5FZjtnqguks2Xv4ZndpqKf6GiaCYdKPDpMkA5uXbf4hNoCl7JbdAhRhhqb5sZ PtbpUPmaovY/fKqqFfcOnidkkwWyE41YkveV/MwfcovfwMQyfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGHjR6tiWf2C2aRmcnxKyCzAWRWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOGFh ZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYxZDNlZTMyNTYvMDZjOTEyOGEtOTI4NS0z YWZiLTk0ZTUtMTlhOTZiMGYyYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjhhYWU3ZGItMmY1MS00NjU2LWJi YTAtNjRmMWQzZWUzMjU2LzI4YWFlN2RiLTJmNTEtNDY1Ni1iYmEwLTY0ZjFkM2Vl MzI1Ni5jcmwwHwYDVR0jBBgwFoAUjODPFqyPb8zkYyft39+h+edvk48wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yOGFhZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYx ZDNlZTMyNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx73KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/FhszwW2dIdt32R4kmLpsANENah/BPcGRoLjun96FOMRk1A2+mUHHK MXjgY2FcP0CmcXaUgkfbdQ5nWrc/IZEtv4Ny2wcIhqd62skp7LOrluP97E1l51yV 32xcrr6hTrLFQMMN4OvQmbmpc4UF3siSxvHMNw5smuVIjWimZ9Mj7TuJ1q9YK7i9 wNLqwT68qV5AbOEu46Wv8MwbrYwXQRixt1GfROFT077KWp5x5yTEhbPeyw1gAhZR m1kHRlV/8aE+ZutfqAyQ2GUD/HN0IUgC6lqp+p7yNTpIwtawAzlqRGqLFl7gcVE0 KaCxlTe9Y4kc1GJiW6QY22SmlE0vKXs= -----END CERTIFICATE-----Generated at Mon Nov 3 08:36:38 2025 by rpki-client